Privacy Policy

Spot+ is an educational, gamified poker training app. It is not a betting service or a real-money gambling app: there is no wagering, no real money in play and no cash prizes. This policy explains what personal data we process, why, and what your rights are.

Data controller: the operator of Spot+. Contact: support@spotplus.app (more details in the Legal Notice).

1. Data we collect

• Account data: when you sign in with Google, we receive your email address, name, profile picture and Google identifier. If you play as a guest, we generate an anonymous device identifier.
• Usage and progress data: spots solved, answers, correct/incorrect results, XP, level, league, streaks, survival scores, friendships and challenges.
• AI coach (Ace) interactions: the questions you send to the coach and the associated spot context.
• Subscription data: if you go Pro, we manage the subscription through Stripe. We store Stripe customer and subscription identifiers; we do not store your card details (Stripe processes them).
• Technical data: server logs, approximate IP address and basic device/browser data needed to provide and protect the service.

2. How we use your data

• Provide the service: account, progress, leagues, streaks, challenges and AI coach.
• Process your Pro subscription and send you receipts/invoices (through Stripe).
• Maintain security, prevent abuse and debug errors.
• Communicate with you about the service (important notices, support).

3. Legal basis (GDPR)

We process your data on the following bases: performance of a contract (providing the app and the subscription), consent (for example, when signing in with Google or using the AI coach), legitimate interest (security and service improvement) and legal obligation (billing and accounting).

4. Who we share data with (processors)

We do not sell your data. We only share it with providers that help us operate the service:

• Google — sign-in (OAuth). Google's policy.
• Stripe — payment processing and billing. Stripe's policy.
• DeepSeek — the AI model powering the coach. Your questions and the spot context are sent to DeepSeek to generate the answer. DeepSeek.
• IONOS — infrastructure hosting (servers in the EU).

5. International transfers

The AI coach uses DeepSeek, whose processing may take place outside the European Economic Area (including China). When you use the coach, the data in your query is transferred to that provider to generate your answer. If you do not want your queries processed this way, avoid using the AI coach feature.

6. Cookies and local storage

We do not use advertising or third-party tracking cookies. For analytics we run our own, self-hosted Umami instance, which is cookieless and does not track you across other sites — it only records aggregate, non-identifying usage (such as page views and which training modes are used). To function, the app stores information in your browser's local storage (language, session/token and guest identifier) and registers a service worker (PWA) for offline use. These are necessary for the service.

7. Data retention

We keep your data while you have an active account. If you request deletion of your account, we delete your personal data except where we must retain it for legal obligations (for example, billing). Technical logs are kept for limited periods.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, by writing to support@spotplus.app. If you reside in the EU, you may also lodge a complaint with your supervisory authority (in Spain, the AEPD).

9. Security

We apply reasonable technical and organisational measures (encryption in transit via HTTPS, restricted access, protected passwords and secrets). No system is 100% infallible, but we work to protect your information.

10. Minors

Spot+ is intended for people aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us and we will delete it.

11. Changes to this policy

We may update this policy to reflect changes in the service or in regulations. We will publish the current version on this page with its update date.

12. Contact

For any privacy questions: support@spotplus.app.